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Aircraft loss-of-control, in particular approach to stall or fully developed stall, is a 
major factor contributing to aircraft safety risks, which emphasizes the need to develop 
algorithms that are capable of assisting the pilots to identify the problem and provid- 
ing guidance to recover the aircraft. In this paper we present several stall recovery 
guidance algorithms, which are implemented in the background without interfering 
with flight control system and altering the pilot’s actions. They are using input and 
state constrained control methods to generate guidance signals, which are provided 
to the pilot in the form of visual cues. It is the pilot’s decision to follow these sig- 
nals. The algorithms are validated in the pilot-in-the loop medium fidelity simulation 


experiment. 


I. Introduction 
Aircraft loss-of-control (LOC), in particular approach to stall or fully developed stall, is a major 


factor contributing to the aircraft safety risks. Recent high profile accidents, such as the crash of 
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Continental Connection flight 3407 and Air France flight 447 (see [27, 30] for details), have resulted 
in growing concerns in the international aviation community about the pilots failure to recognize 
conditions that lead to aerodynamic stall and ability to respond appropriately to an unexpected 
stall or upset event [8]. To address these concerns, as well as the recommendations of the study 
of 18 recent loss-of-control events by the Commercial Aviation Safety Team (CAST), the Federal 
Aviation Administration (FAA) issued final rule changes to 14 CFR Part 121 (see [3] for details) 
mandating air carriers in the United States to train the pilots in recognizing, avoiding, and properly 
recovering from stalls by 2019. 

This pilot training assumes availability of proper aerodynamic models representing realistic 
approach to stall, stall and post-stall flight conditions, and high fidelity simulators capable of re- 
producing these flight conditions. To this end, a linearized unsteady vortex lattice method was 
combined with a decambering viscous correction to study the impact of unsteady and post-stall 
aerodynamics on a maneuvering aircraft [28]. In [26], wind-tunnel data and sensor characteristics 
were used to identify aerodynamic models for simulating stall and recovery for transport aircraft. 
In [1], development of a type-representative model is presented to meet the randomness require- 
ment typically available in stall and post-stall flight conditions. The evaluation of several full stall 
simulator models in piloted simulations is presented in [32]. 

In addition, FAA has issued the Advisory Circular AC 120-109 (see [2] for details), which 
eliminates recovery profiles that emphasizes minimal altitude loss and the immediate translation 
to the maximum thrust, and emphasizes immediate reduction of angle of attack as the main step 
in the stall recovery procedure. However, FAA does not provide guidance for full aerodynamic 
stall recovery. In addition, the CAST "Safety Enhancement SE 207" research initiative propose 
the aerospace community to develop algorithms to enhance pilots situational awareness and provide 
control guidance for recovery from aerodynamic stall [36]. 

In recent years, the development of LOC detection and mitigation algorithms for transport 
aircraft in hazardous conditions, such as atmospheric disturbances, airframe impairment or compo- 
nent failures, was substantially influenced by the NASA Aeronautics Research Mission Directorate 


(ARMD) Vehicle Safety Systems Technologies (VSST) project. An overview of on-board LOC 


prevention and recovery technologies can be found in [5]. Since parametric uncertainties and un- 
known atmospheric disturbances are accompanying the LOC events, adaptive control methods were 
proposed for aircraft LOC prevention and recovery, see for example [15], [23], [40], [7] and refer- 
ences therein. Other approaches include neural network estimations combined with sliding mode 
control [35] or trajectory optimization techniques [39], actuator health monitoring combined with 
robust control methods [18, 29], state-limiting augmentation to a dynamic inversion control [12], 
constrained nonlinear model predictive control [19], pseudo-control hedging [21], multi-mode upset 
recovery flight control [11], flight envelope protection system [38], just to mention few of them. How- 
ever, theses methods shift the ultimate decision making authority from the pilot to the automation, 
alter the exiting flight control system, and may not be implemented on-board in the near future. 

Another focus area of VSST was to assist the crew for accurate decision-making under hazardous 
conditions by increasing the situational awareness. On-line estimation of the safe flight envelope is 
one of the directions in this area, see for example [14, 22, 24, 25, 41] and references therein. To 
estimate the flight envelope of impaired aircraft an algorithm based on the differential vortex lattice 
method combined with an extended Kalman filter is presented in [25]. In [22], the safe maneuvering 
envelope is estimated using time scale separation and optimal control formulation for the reachability 
analysis. This approach is extended in [41] to include uncertainty quantifications. In [24], the 
computation of recoverable sets for aircraft in LOC condition is presented using approximations of 
safe sets for the closed-loop linearized system dynamics. 

These safe flight envelopes are used to improve the pilot’s situational awareness by determining 
available aircraft maneuverability or controllability margins using the optimal control framework 
[14], adaptive estimation [34] or data-based predictive control [4]. The controllability boundaries 
are computed using the pilot’s inputs, aircraft state time histories recorded over a time window, 
and the estimated dynamics, and are provided to the pilot in the form of two dimensional bounding 
box around the pilot’s stick current position. 

The pilots situational awareness can also be improved by conducting nonlinear analysis of the 
aircraft dynamics for identification of the bifurcation points on the boundary of safe envelop, see 


for example [13, 20, 33] and references therein. In [20], it is shown that dynamic nonlinearities 


result in difficult or nonintuitive regulation around the critical trim points or transitioning between 
them because of non-uniqueness of corresponding control actions. The bifurcation analysis are used 
to identify the attractors of the nonlinear aircraft that govern the upset behavior in [13], and to 
determine feasible level flight trim points as a function of elevator deflection for several thrust and 
leading edge flap settings [33]. 

Although presented LOC detection, estimation and mitigation methods have some preventive 
functionality, they do not address the stall recovery guidance problems, which is a critical component 
in flight safety assurance, given that the aerodynamic stall can happen in any pitch attitude or bank 
angle or at any airspeed even for a nominal aircraft. 

In this paper we present several algorithms to address the stall recovery guidance problem. 
These algorithms are implemented in the background without interfering with the flight control 
system and altering the pilot’s actions. They are using input and state constrained control methods 
to generate guidance signals, which are provided to the pilot in the form of visual cues. It is the 
pilot’s decision to follow this signals. The algorithms are validated in the pilot-in-the loop medium 


fidelity simulation experiment. 


II. Stall Recovery Guidance Problem Formulation. 

When the aircraft approaches stall or is in stall, the pilots main step in the recovery procedure 
should be directed to reducing the angle of attack, as the FAA Advisory Circular recommends. This 
is done mainly by commanding pitch down maneuver using the longitudinal control effectors. To 
predict the aircraft response to such commands, the pilot needs to have easily understandable and 
meaningful information about the state variables, which are directly influenced by or influencing 
the dynamic behavior of the angle of attack, since the latter is not directly controlled by the pilot. 
From this perspective, we use the flight path angle, the altitude and the pitch angle. 

On the other hand, the information provided to the pilot must be predictive in nature in order 
to give some lead time to the pilot to make a right decision in stressful situation. That is the current 
values of the corresponding state variables may not be useful from the recovery perspective, since 


they may represent unsafe flight conditions. Therefore, it is necessary to develop predictive models 


to generate the aircraft state predictions, which coincide with the actual states for nominal (safe) 
flight conditions. When the aircraft leaves the safe flight envelop, these models continue to generate 
signals corresponding to safe flight conditions, hence can guide the pilot to recover the aircraft. 

In this paper, our objective is to develop algorithms for generating stall recovery guidance 
signals, which have physical meanings and are easy to understand, can increase the pilots situational 
awareness, can be easily visualized on the primary flight display with simple symbology and color 


codes, and are not overburdening or impacting the pilot from fulfilling the mission. 


III. Preliminaries 


A. Pseudo Control Hedging 

The principle of Pseudo Control Hedging (PCH) was originally developed in [17] in the context 
of Model Reference Adaptive Control (MRAC) to compensate for discrepancy resulting from the 
actuator position or rate saturation. The purpose of the PCH was to modify the reference model 
dynamics such that the actuator characteristics are removed from the tracking error dynamics. 
Therefore the adaptation mechanism, which is based on the tracking error, is not affected by the 
saturation. The PCH method was successfully applied to non-adaptive flight controls in conjunction 
with the nonlinear dynamic inversion (NDI) (see for example [21] and references therein), thus 
providing an alternative for the inversion of the actuator dynamics. Here, we outline the PCH 


framework from the aircraft control perspective. Let the aircraft dynamics be given by 


&(t) = f(x) + g(a)Ucom(t) ; (1) 


where Ucom(t) is the commanded control input to the actuator, f(x) is the aerodynamic model and 


g(x) is the control effectiveness. The NDI control law is given by 


Ucom(t) = g~*(x)[v(t) — a(a)], (2) 


where v(t) is the virtual input representing the desired dynamics. The actual control input Uacr(t) 
entering the aircraft dynamics may not be identical with the commanded input ucom(t) due to 


actuator characteristics. Therefore the estimate of the virtual input 6(t) is computed as 


O(t) = f(a) + O(a) Uace(t) - (3) 


The PCH signal is obtained from (2) and (3) as 


This signal is used to modify the reference model dynamics, which is given by 


Ere p l(t) = Set eb) + Oncor (t) Ub) 5 (5) 


where Zeom(t) is the external (pilot’s) command. Denoting the tracking error by e(t) = x(t)—2re f(t), 


we obtain 


é(t) = f(z) Ty G(X) ace (t) + Gn tee) OmFoom\t) = v(t) Co) 





= f(x) + 9(r)tcom(t) + AmXre s(t) — bmZeom(t) ; 


which is exactly the error dynamics without the actuator in the loop. When aerodynamic model and 
control effectiveness are uncertain, an adaptive NDI is used, where the uncertainties are estimated 


on-line and are taken into account in the computation of the PCH signal. 


B. Flight Envelope Protection Method 
This approach was introduced in [37] and applied to NASA Transport Class Model as a flight 
envelop protection method, which modifies the pilots input when the corresponding output variable 


approaches the envelop boundary. Let the state of the aircraft to be protected satisfy the equation 


a) (4) = f(x) + g(x)Ucom(t) ; (7) 


where Ucom(t) is the pilot’s command, f(x) and g(x) represent the aircraft, aerodynamic model, and 
m is the relative degree from the command to output of the system. Let the safe flight envelope is 


given by the inequality 
u(t) < @max (8) 


for all t > 0. As soon as the inequality (8) is violated, the command wcom(t) is modified such that 


x(t) tracks the output 2,e,(t) of a reference model 


m m—-1 
me) = Gm 1250; (t) RAED [Tres (t) — Zmax] 5 (9) 


which is initialized at the system’s initial conditions. The envelope violation is detected by means 


of the comparison signal 
w(t) = —@m—1e°"~) (t) — ++» — ao [2(t) — tax] , (10) 


and the pilot’s command is modified as follows 


Ucom(t), if Ucom(t) < aw [w(t) — f(x)| 


alas [202 — F)] if weomlt) by bolt) — F(@)] 


(11) 


Ucom(t) = 


At the command modification time instant, the initial conditions of the reference model are reset to 
the system’s states. It is shown in [37] that the command modification (11) with the initial condition 
resetting guarantees the inequality (8), if the impulse response h(t) of the reference model satisfies 


the condition 


O< [ h(r)dt <1 (12) 
0 


for all t > 0, which implies that the reference model is constructed to be non-overshooting (for the 


non-overshooting control the reader is referred to [6], [9], [10], [31], and references therein). 


IV. Approaches to Stall Recovery Guidance 
In this section we present several approaches to the stall recovery guidance problem. Our focus 
is on the aircraft longitudinal dynamics. The development of stall recovery guidance algorithms for 


aircraft full dynamics is subject of the future research. 


A. Input Constrained Control Approach 

This approach is based on the PCH method, where the angle of attack is treated as a control 
signal, and the role of the actuator is played by a magnitude saturation block. The lower and upper 
limits of this block are the a-envelop boundaries, which are available from the manufacturer for the 
nominal aircraft or are obtained by means of the envelop estimation methods presented in Section I. 
The idea is to generate a guidance signal, which matches with the corresponding actual variable for 
nominal flight conditions and provides a recovery cue to the pilot, when the angle of attack reaches 


the stall value (some margins may be applied to give a lead time to the pilot). Next, we discuss the 


application of this idea to generate recovery guidance signals for several aircraft states, which can 


be easily visualized on the primary flight display (PFD) without overloading. 


1. Flight path angle guidance 


Consider the following flight path angle dynamics 
. 1 ; ‘ : : 
4(t) = mV [Lcosy+ S'sinp — mg cosy + T (sinacos + sin 8cosasin p)] , (13) 
m 


where ¥ is the flight path angle, m is the mass, g is the gravity acceleration, V is the airspeed, L 
is the lift force, S is the side force, y is the wind axis bank angle, T is the thrust, a is the angle 
of attack, and £ is the sideslip angle. The dynamics (13) are used as a model for generation of the 
guidance signal, which is implemented in the on-board computer in real time, where all variables 
except for LZ and y are computed from the actual measurements and aerodynamic model lookup 


table. The lift force is represented in the form 
L=I9+Laa, (14) 


where the coefficients Zo and L, are computed from the aerodynamic model lookup table for each 


time instant. Therefore the dynamics for the y-guidance model can be represented as 


Vquia(t) = fy(2) + 9+ (®) Qcom(t) ; (15) 
where 
1 : ; : : 
hes ~V [Lo cos pp + S sin uw — mg COS Yguia + T (sin a cos ps + sin 6 cos asin 1)| 
1 
= —TL,cosp. 16 
g(a) = pha cosy (16) 


In this setup, a in the term T (sinacosp+sin 6 cosasin jz) is the actual angle of attack and is 
treated as an external variable to the guidance model (15). This enables us to stay within the affine 
in the control framework, and is justified by the fact that the contribution of the thrust in the flight 
path angle dynamics is very small compare to the lift force. 

Here, our goal is to design a control input Q¢om(t) such that the guidance model (15) tracks the 


reference model 


Yes (t) = Ky [Yact(t) — Ire (6)] 5 (17) 
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Fig. 1 The schematics of the flight path angle guidance design. 


where Yact(t) is the aircraft actual flight path angle, and k, is a design parameter representing the 


time constant of the reference model. We design a NDI control as 
com (t) = 93 * (x) [v(t) — fy(2)] , (18) 
and PCH signal as 
a(t) = v(t) — fy(@) — gy(w)ades(t) ; (19) 


where Qges(t) is the output of the saturation block, and v(t) is the virtual control, which is computed 


as 


u(t) = —kpey(t) — ki | ey(t)dt + ky [Yact(t) — Yreg (E)] - (20) 


Here, k, and k; are the proportional and integral gains, ey = Yguia(t) — Yref(t) is the tracking error, 


and the reference model dynamics are modified according to PCH method 


Yes (t) = Ky [act(t) — Yreg (t)] — H(t) . (21) 


The schematics of the design is presented in Figure 1. The resulting tracking error dynamics have 


the form 


Bia See | e,,(t)dt. (22) 


It is straightforward to show that Yguia(t) always tracks the reference flight path angle 7,¢7(t). The 
later in turn tracks the actual flight path angle as long as Q¢o,,(t) remains in the safety limits. When 


the aircraft approaches to stall or is in stall, acom(t) exits the safety limits. Then the algorithm 


modifies 7,¢(t) such that the corresponding Q-om(t) returns to the safety limits. In this case, 7; ¢(t) 
no longer tracks the command to the reference model, which is the actual flight path angle. The 
resulting Yguia(t) indicates a safe flight condition, and is displayed on PFD. It can be seen as a small 


magenta ball inside the flight path symbol in nominal conditions (see Figure 2). 
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Fig. 2 PFD with the flight path angle guidance signal in a nominal condition. 


As soon aS Qcom(t) hits the saturation limits, the magenta ball separates from the flight path 


symbol (see Figure 3), but still indicates a safe flight condition. 


2. Altitude guidance 


Consider the following altitude dynamics 


A(t) = Zs [-Z—mg+Tsin9] , (23) 
m 
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Fig. 3 PFD with the flight path angle guidance signal in approach to stall condition. 


where h is the altitude, Z is the aerodynamic force component on the inertial z direction (North- 


East-Down frame), and @ is the pitch angle. For the h-guidance model we use the representation 
Z=2Z+Zqa, (24) 


where the coefficients Zp and Z, are computed from the aerodynamic model lookup table for each 
time instant. The dynamics for the h-guidance model have the form 


Aguia(t) = fr(®) + gn(@)Qcom(t) , (25) 
where we denote 
fr(x) = 7 [Zo — mg + T sin 6] 
gna) = Za. (26) 
Again, we treat the term T sin 0 independent of the control input Q¢om(t), and use the measurement 


of actual pitch angle to compute it. 
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Here, we design a control input Q¢om(t) such that the guidance model (25) tracks the second 


order reference model 


Ares (t) = —kihres(t) — ka [hres (t) — Ract(t)] ; (27) 


where hact(t) is the aircraft actual altitude, and k,, ko are design parameters representing the 


characteristics of the reference model. In this case, the design is based on the following equations 


com(t) = gy (x) [v(t) — fr(2)] (28) 


v(t) = —kyé;,(t) _ ken (t) + hres (t) 


ee 
— 

eH 
cube? 

lI 


u(t) — fr(x) — gn(x)aaes(t) , 


where e;,(t) = Aguia(t) — href (t) is the tracking error. The resulting modified reference model 


dynamics are 


Nireg (t) = —kahreg(t) — ko [Pres (t) — hact(t)] — 6) (29) 


As in the flight path angle case, hguia(t) tracks the actual altitude as long as @¢om(t) remains in the 
safety limits. When the aircraft approaches to stall or is in stall, @¢om(t) leaves the safety limits, 
triggering nonzero t;,(t), which modifies the reference signal h,. s(t) such that @com(t) returns to the 
safety limits. However, the resulting hguia(t) no longer tracks the actual altitude, but indicates a 
safe flight condition. Figure 4 displays the altitude guidance signal as a magenta bar on the altitude 
tape in nominal flight conditions. It can be observed that the guidance signal coincides with the 
aircraft actual altitude. 

Figure 4 displays the altitude guidance signal in stall condition, where the magenta bar indicates 


a lower altitude for the recovery from stall. 


B. State Constrained Control Approach 

One of the primary variables controlled by the pilot and readily available on the PFD is the 
aircraft pitch angle. Hence, it can be a good guidance signal candidate for the stall recovery 
algorithm. However, the pitch angle is not a good stall indicator, although it relates to the angle 


of attack through aircraft state variables. In fact, stall can happen in any pitch attitude. One way 
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Fig. 4 PFD with the altitude guidance signal in approach to stall condition. 


to use the pitch angle for the guidance purposes is to derive a proper pitch rate signal trough the 


following angle of attack dynamics 
a(t) =q— f(z,a), (30) 
where 
1 : : . : 
f(a,a) = sec B aV (L — mgcosycosu+T sina) + pcosasin’ +rsinasin 
m 

and p, q, r are body frame angular rates, and integrate the kinematic equation 

6(t) = qcosd—rsing, (31) 


where ¢ is the body frame bank angle. To this end, the dynamics (30) is used to generate a guidance 
model with a properly designed external command, for which q is treated as a control input. The 
output of the guidance model is kept within the a-envelope using state limiting control methods. 


The resulting control signal indicates a safe pitch rate for all flight conditions, and matches with 
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Fig. 5 PFD with the altitude guidance signal in approach to stall condition. 


the actual pitch rate for the nominal one. Therefore, the corresponding pitch angle obtained from 
(31) can provide a stall recovery guidance to the pilot. 


The guidance model in this case is mimicking the angle of attack dynamics 


Qguia(t) = decom (t) = f(a, Qguid) ; (32) 


where gcom(t) is treated as a control input, and is designed such that ag.ia(t) tracks the actual 


angle of attack for normal flight regimes. That is we set 
deom(t) = —kal@guia(t) — a(t)] + f(®, Aguia) +9 — f(t, a), (33) 
which results in exponentially stable dynamics 
€a(t) = —kaea(t) (34) 


for the error signal e,(t) = Qguia(t) — a(t). Here ky > 0 is a design parameter representing 


the convergence rate. Initializing the guidance model at the actual angle of attack guarantees 
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Qguia(t) = a(t) for al t > 0 as long as the control input g-om(t) satisfies (33). When the aircraft 
approaches to stall, qcom(t) needs to be modified to represent a guidance signal for the recovery. If 


we directly follow the envelope protection method from [37], that is if we choose a reference model 


ref (t) —s —ka [Aref (t) = Amaz| ’ (35) 


where Qnax is the stall angle (possibly with some buffer to give the pilot a lead time), and use the 


upper comparison signal 


Wu (t) i —ke [Aguia(t) = Qmax| (36) 


to modify qcom(t) according to equation 


deom(t), if qeom(t) < wu(t) + f(®, guia) 
deom(t) = (37) 

Ore f (t) + f(a, Qguid)s if deom(t) = wWu(t) + f(a, Oguid) 
and reset the initial conditions to Qref(tu) = Aguid(tu) at the command switch time instant t,, 
we end up with dguia(t) < Qmax. Therefore, the corresponding gceom(t) will represent a safe flight 
condition, but not a suitable recovery signal. In essence, the signal ag,;a(t) as well as the actual 
angle of attack is anticipated to leave the envelope boundary represented by Qmq2, when its rate of 
change exceeds the limit set by the comparison signal. The command modification (37) forces the 

signal ag,iq(t) to follow the reference a,¢¢(t) instead of the actual angle of attack. 

This motivates us to change the reference model driving signal such that the resulting a,c; (t) 


converges to a target value a; instead of Qo, after its rate of change increase is detected at time 


t,. That is we set 


Greg (t) = —KalOres(t) — a4 (38) 


for t > t,. Here, the target angle of attack value a; < Qmaz is chosen from the linearity region on 
the lift curve to recover the controllability of the aircraft. For example it can be set to the trim value 
corresponding to the current flight conditions. Since Qref(tu) < Qmax, and the reference model is 
non-overshooting and non-undershooting, we can conclude that at < Qref(t) < Qmaz for all t > ty. 


When the rate of change of Qguia(t) drops below the lower comparison signal 


wy(t) = —kalaguia(t) — at] (39) 


15 


at some time instant t;, the control input is reset to (33) with aguia(tz) = a(tz). In the interval [t,, t7] 
the reference signal a,e¢(t) monotonically changes from Qguia(t.) to az, and the guidance model 
tracks it. The resulting q.om(t) generates a guidance signal for the aircraft pitch angle according to 
equation 


Oguia(t) = deom(t) cosd — rsing. (40) 


In this case, the flight director stile symbols can be used to display the recovery guidance signal. 
Figure 6 displays the pitch angle guidance signal as a magenta lines on both sides of PFD in nominal 


condition, which are aligned with the actual pitch angle display. 


295700 


29600 





Fig. 6 PFD with the pitch angle guidance signal (magenta line) in nominal condition. 


Figure 7 displays the pitch angle guidance signal on PFD in stall condition. The magenta lines 
indicate that the pilot should pitch down in order to recover from the stall. 


We summarize the state constrained control based stall recovery guidance algorithm as follows 
e Run the guidance model (32) with the initial condition ag.;q(0) = a(0) and control input 
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Fig. 7 PFD with the pitch angle guidance signal (magenta line) in approach to stall condition. 


dcom(t) computed according to (33). 


e Generate the comparison signal w,,(t). 


e If gcom(tu) > Wultu) + f(@, guia), run the reference model (38) with aref(tu) = Aguia(tu), 


and set geom(t) = —ka[ares (t) — ae] + f(@, guia): 
e Generate Oguia(t) according to (40) and display on the PFD. 
e Generate the comparison signal w(t). 


© If dcom(ti) < wi(ti) + f (@, Aguia), eset Yeom(t) to (33) and the guidance model initial condition 


to Aguia (tr) = a(t;). 


e Remove @g,:a(t) from the PFD. 
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V. Simulation Results 

We evaluate the stall recovery guidance algorithms using the Transport Class Model (TCM) 
as defined in [16] and the pilot-in-the-loop FLTz simulation environment available in the Advanced 
Control Technologies (ACT) lab at NASA Ames Research Center. For this simulations, we assume 
that the TCM is in a steady level flight at the altitude of 30000 ft with the calibrated airspeed of 
230kt when an engine control malfunction results in the minimal throttle settings, but the autopilot 
still works in the altitude hold mode. This is similar to Air Algerie Flight 5017 (MD-83) crash in 
Mali, near Gossi, on 24 July 2014, caused by the engine pressure sensors icing, which resulted in 
the autothrottle disengagement. 

Since the aircraft gradually slows down, the autopilot increases the pitch angle in order to 
maintain the altitude, which eventually results in stall. In these simulation experiments the aircraft 
flies without the autopilot, but the pilot is tasked to maintain the level flight, thus mimicking the 
autopilot in the altitude hold mode. When the aircraft gets into the stall, the pilot’s task is to 
recover from the stall by following the displayed guidance signal and then maintain level flight 
afterworlds. In all simulations, for the guidance algorithms the maximum angle of attack is set to 
14 deg, which is close to the aircraft stall angle. 

Analysis of the available data indicates that the crew likely did not activate the system during 
climb and cruise. 

As a result of the icing of the pressure sensors, the erroneous information transmitted to the 
autothrottle meant that the latter limited the thrust delivered by the engines. EPR fluctuations on 
both engines started, followed by two variations of greater amplitude. The autothrottle disengaged 
during these two variations in EPR and the aeroplane started to descend. 

In the first simulation experiment the pilot was tasked to follow the flight path angle guidance 
(FPAG) signal to recover from the stall. Figure 2 displays the PFD at the initial conditions. The 
FPAG signal is represented by a magenta circle inside the flight path symbol (white circle with 
the wings), which implies that yguia(t) and y(t) are identical for the initial value of the angle of 
attack. As the aircraft approaches to stall the magenta circle separates from the flight path symbol 


and moves downward as it can be seen from Figure 3, indicating that a safe maneuver would be 
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(a) FPAG and actual flight path angle time histories (b) Computed from the SL algorithm and actual angles 


of attack time histories 


Fig. 8 Displayed guidance signal and the angle of attack when the pilot follows FPAG 


generating a negative flight path angle. 

The pilot pitches down and follows the magenta circle to recover the aircraft. Figure 8(a) displays 
the flight path angle time history. It can be observed that stall happens at about t = 70 sec, and 
the pilot starts to follow the guidance signal in 3 sec. The aircraft gets out of stall very fast, but 
the pilot starts gradually recovering the aircraft at t = 96 sec. The second stall happens at about 
175 sec, and the pilot follows the guidance signal and quickly recovers the aircraft second time as it 
can be observed from Figure 8(b), which displays the actual angle of attack (blue line) and aguia(t) 
signal computed by the state limiting guidance (SLG) algorithm. The corresponding 6,,:a(t) signal 
along with the actual pitch angle response are presented in Figure 9(a). Although O0,u:a(t) was not 
displayed on PFD for this experiment, it can be observed that pitch angle guidance (PAG) signal 
leads the FPAG signal for about a second. This can be explained by the anticipatory nature of the 
state limiting approach, since the derivative of the desired angle of attack is regulated. The altitude 
guidance (AG) signal was also computed in the background. It is displayed in Figure 9(b). It can be 
noticed that the AG is lagging behind the FPAG for about a second, which is attributed to higher 
order dynamics for generation of the AG signal. 

In the second experiment only the AG signal was displayed to the pilot performing the same task 
from the same initial conditions as in the first case. Figures 10(a) and 10(b) display the altitude 


and the corresponding angle of attack time histories. It can be seen that the pilot was able to 
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(a) PAG and actual pitch angle time histories (b) AG and actual altitude time histories 


Fig. 9 Computed but not displayed signals when the pilot follows FPAG 
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(a) AG and actual altitude time histories (b) Computed from the SL algorithm and actual angles 


of attack time histories 


Fig. 10 Displayed guidance signal and the angle of attack when the pilot follows AG 


recover from the stall following the AG signal, although it gives the recovery cue slower than the 
other two algorithms as it can be learn from Figures 11(a) and 11(b). Namely, the stall is predicted 
by AG algorithm at t = 72 second, while FPAG detects it at t = 70 seconds, and AG detects it at 
t = 69 seconds. Additionally, it can be observed from Figure 11(a) that FPAG algorithm is more 
conservative and suggests a dipper dive for the recovery. 

In the third experiment the pilot performs the same task following the PAG signal from the 
same initial conditions as in the previous cases. Figures 12(a) and 12(b) display the pitch angle 
and the corresponding angle of attack time histories. It can be observed that the PAG algorithm 


generate non-smooth pitch angle guidance (red line in Figure 12(a)) and desired angle of attack (red 
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(a) FPAG and actual flight path angle time histories (b) PAG and actual pitch angle time histories 


Fig. 11 Computed but not displayed signals when the pilot follows AG 
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(a) PAG and actual pitch angle time histories (b) Computed from the SL algorithm and actual angles 


of attack time histories 


Fig. 12 Displayed guidance signal and the angle of attack when the pilot follows PAG 


line in Figure 12(b)) signals due to switches in the desired angle of attack dynamics. However, the 
PAG signal gives the recovery cue to the pilot earlier that the guidance signals generated by the 
FPAG and AG algorithms as it is evident from Figures 13(a) and 13(b) respectively. Also, it can be 
learned from these figures that FPAG and AG algorithms suggest a dipper dive in order to recover 
from the stall. 

These simulation experiments show that the PAG algorithm gives more lead time to the pilot 
than the other two algorithms, but generate non-smooth guidance signal. The FPAG algorithm 
generates smoother but conservative signal requiring a dipper dive. The AG algorithm is slower than 


other two algorithms and results in most altitude loss during the recovery maneuvers. However, 
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(a) FPAG and actual flight path angle time histories (b) AG and actual altitude time histories 


Fig. 13 Computed but not displayed signals when the pilot follows PAG 


these are only preliminary results, and more research and analysis are needed in order to improve 
the algorithms from the perspective of the pilots perception and aircraft performance criteria such 
as minimum altitude loss or time to recover, before the algorithms can be evaluated in piloted 


simulations in the NASA Ames Research Center Vertical Motion-based Simulation facility. 


VI. Conclusion 
We have presented several aircraft stall recovery guidance algorithms based on the input and 
state constraint control approaches. These algorithms are implemented as plug-and-play technology, 
which do not interfere with the flight control system and do not modify the pilot’s actions. The 
outputs of the algorithms are provided to the pilot in the form of visual signals on the Primary 
Flight Display when the aircraft is in stall or approach to stall. The pilot has the ultimate power 
to follow the guidance signals. The algorithms are validated in the pilot-in-the loop high fidelity 


simulation experiment. 
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